Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/wppiA4xgyIaCtzIIPm64yiGZeo8.roa
File: wppiA4xgyIaCtzIIPm64yiGZeo8.roa (raw, json)
Hash identifier: HcUQkUs2AlU+rm4tSXyGogDU52jMG8GwgFE5s/wTnZs=
Subject key identifier: C2:9A:62:03:8C:60:C8:86:82:B7:32:08:3E:6E:B8:CA:21:99:7A:8F
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0902F89F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/wppiA4xgyIaCtzIIPm64yiGZeo8.roa
Signing time: Sat 01 Jan 2022 16:00:25 +0000
ROA not before: Sat 01 Jan 2022 16:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 194.31.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151189663 (0x902f89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c29a62038c60c88682b732083e6eb8ca21997a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:6a:dc:f1:04:37:71:55:e2:53:84:ae:29:
55:ef:c0:9f:14:d7:66:c8:d4:b3:ea:69:8f:af:6d:
7d:15:f8:b8:5a:50:d8:45:27:69:55:22:af:e7:91:
e6:80:0c:b0:d8:54:49:a0:ae:af:62:d9:a3:b7:3f:
fb:5a:f2:cb:6c:bb:74:db:37:03:76:db:b8:43:59:
70:4f:eb:b4:75:9d:56:e6:ab:53:4e:4d:b5:51:8b:
6f:79:55:82:16:f9:41:4f:ab:ba:ec:0c:87:f0:bf:
9c:b1:f0:19:f8:5c:31:03:e9:21:09:f3:9e:3f:5f:
04:ee:cb:f3:27:e8:42:5d:f3:5d:99:23:21:aa:e5:
83:2e:64:40:87:2a:28:b8:d4:5f:de:1e:5d:6a:2b:
ba:45:46:0d:07:76:97:c2:35:c6:41:91:b1:8c:e7:
1f:f5:51:cb:5f:8c:01:52:f4:4d:54:3d:cb:ed:7f:
10:23:bc:f0:40:f0:93:56:81:06:54:3d:40:ad:c4:
9a:d5:97:2a:61:9f:56:81:b0:eb:e0:95:ba:f2:8e:
01:a1:ba:52:b9:50:33:b6:72:39:c0:b2:b4:79:0c:
07:0a:65:ef:52:b6:2f:f9:fb:f9:9b:e2:d8:e8:39:
20:6b:c0:03:9c:93:1a:ed:33:85:ad:97:cf:15:1c:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9A:62:03:8C:60:C8:86:82:B7:32:08:3E:6E:B8:CA:21:99:7A:8F
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/wppiA4xgyIaCtzIIPm64yiGZeo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.142.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a5:58:95:00:90:45:fc:e3:ce:e8:7c:28:f1:12:c9:3e:ba:
b3:6f:3f:ca:f6:dd:6c:9d:96:58:f4:8b:b6:18:63:f3:93:70:
23:e9:b3:41:b4:78:60:6e:fd:a4:f4:44:10:75:7b:37:0f:91:
0f:aa:15:d2:a7:24:46:dc:f4:18:26:82:8c:a1:cc:d3:bd:b2:
ca:fa:15:ce:02:28:d0:a4:1d:16:04:d6:e5:55:de:12:76:25:
60:85:9e:0e:c2:65:32:5a:96:6c:6e:32:e5:c2:04:dd:67:a2:
5e:9a:f3:b7:35:a0:f9:53:25:d6:b2:0e:fd:2a:bb:c5:15:58:
51:cb:15:e9:43:84:bf:b5:c5:46:ec:54:0b:40:ee:04:60:df:
69:9f:a1:af:75:9e:72:1b:42:15:35:99:0b:42:0b:dd:a3:df:
d4:a5:e8:33:ef:fe:56:ec:f1:0f:68:5b:df:77:fb:13:94:28:
94:df:08:60:ec:d7:b0:cc:0e:2d:5d:af:d8:2d:f6:45:eb:1c:
00:b0:e6:62:73:ed:37:9b:16:df:27:01:c7:78:52:d9:07:d2:
ba:0c:32:9c:00:6c:a9:14:59:b6:2c:95:7f:3a:11:f9:0e:8e:
34:cd:23:7f:26:e1:46:c6:a1:12:a3:5d:57:f4:6f:02:4b:e1:
0b:16:7c:46
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECQL4nzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDEw
MTE2MDAyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI5YTYyMDM4YzYw
Yzg4NjgyYjczMjA4M2U2ZWI4Y2EyMTk5N2E4ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM11atzxBDdxVeJThK4pVe/AnxTXZsjUs+ppj69tfRX4uFpQ
2EUnaVUir+eR5oAMsNhUSaCur2LZo7c/+1ryy2y7dNs3A3bbuENZcE/rtHWdVuar
U05NtVGLb3lVghb5QU+ruuwMh/C/nLHwGfhcMQPpIQnznj9fBO7L8yfoQl3zXZkj
Iarlgy5kQIcqKLjUX94eXWorukVGDQd2l8I1xkGRsYznH/VRy1+MAVL0TVQ9y+1/
ECO88EDwk1aBBlQ9QK3EmtWXKmGfVoGw6+CVuvKOAaG6UrlQM7ZyOcCytHkMBwpl
71K2L/n7+Zvi2Og5IGvAA5yTGu0zha2XzxUcrQkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTCmmIDjGDIhoK3Mgg+brjKIZl6jzAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
L3dwcGlBNHhneUlhQ3R6SUlQbTY0eWlHWmVvOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWRO
dGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIfjjANBgkqhkiG9w0BAQsFAAOC
AQEAdqVYlQCQRfzjzuh8KPESyT66s28/yvbdbJ2WWPSLthhj85NwI+mzQbR4YG79
pPREEHV7Nw+RD6oV0qckRtz0GCaCjKHM072yyvoVzgIo0KQdFgTW5VXeEnYlYIWe
DsJlMlqWbG4y5cIE3WeiXprztzWg+VMl1rIO/Sq7xRVYUcsV6UOEv7XFRuxUC0Du
BGDfaZ+hr3WechtCFTWZC0IL3aPf1KXoM+/+VuzxD2hb33f7E5QolN8IYOzXsMwO
LV2v2C32RescALDmYnPtN5sW3ycBx3hS2QfSugwynABsqRRZtiyVfzoR+Q6ONM0j
fybhRsahEqNdV/RvAkvhCxZ8Rg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org